MAL-2025-105590 Malicious code in managerial_parrot_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dca479c2ed062ce652dc77e63f7e3cd2575aff5de4d2fb2e5c6dd3f359e19364 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101344 Malicious code in dennis-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5368cd9c3fcbd600a396888bde5eb5ce94ce6a2bdf51f4829b94cb701441e04e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103954 Malicious code in imaginative_alligator_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96bc1216969225468e424e1ee42afe58b50865ec20f6c7ce3ba788dbadf47139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108931 Malicious code in sorry_pike_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66178b5919991fc5c2e68c8415b9e597ace086c40b74eca1d002ef4ee0e20006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103618 Malicious code in head_roadrunner_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da8f45688fbf0611cef4ecde249b1d33d1d411def800c357c3a7a057556267d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109601 Malicious code in thick_firefly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e754cd21e9ef2933b7a9d924183d0606c01bdc3932e5f466f4d772bfa3ac721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102587 Malicious code in fast_snail_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e7f2b93ce3f5992e531b595ad55caa7b6845375a9bc71517806a9255b093d90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106292 Malicious code in new_rook_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6664e94c54cc2e8c33fe9425849195134d67987b2696caaed7dcfe6ddf50edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110250 Malicious code in useful_quokka_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2e39c10d84000ac3b16e2a6b92b5e01264d11b96ae6a98fd3b76f404a6cc22c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103269 Malicious code in glamorous_ladybug_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f60c47292a02f6281aee373674e80cb38c41ff64ff6fd06bfc224fe98a5469d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107653 Malicious code in quickest_kite_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed259233b9515bdb77dc4b0c0d4fdfe9150837be485c7ec72e0dfafafa4a2d50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106853 Malicious code in outstanding_turkey_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 284d03ae078b69eef26d84ed4828d6c650c978413320e9cc49e32bf29336e7b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intellectual_lark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dccd4053ebc21adae8e3b364e9c2f10e010b3c18a600f355b9ef116396359317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in condemned_elephant_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6fa417b1c91377b7d4f3d73cffe36e2c512cf4984300c280c88cbcd942aefc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colonial_gopher_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063e4e997e221c313ef744c18d99ddd792e40ee0b18b3e48734ae720172464ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in small_kangaroo_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0f391fcf7c5a40ace13ac39912dfa3b9fd2693cea49fdc599d16211fb5572b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yielding_smelt_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d16a6f352660e01dbd136bb89ff0e4efc8b8238890f121df3e78600912386c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in necessary_leopard_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9123c2afe62758a63fea33d5367139620557b834d2e915e1c0d3acbc53fbb458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in round_tern_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d2b1400a08acb466e340343d8498cf2c932f2e42facf34aedd96190de68324c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in whole_turkey_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd1553138f4770180f733c0e6aeb5db895519a60b40466edc3ca38a1c040d171 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...